{"id":1730196,"url":"https://alion.io/job/clay-product-operations-security-compliance","title":"GRC Program Manager","company":{"id":1484,"name":"Clay","domain":"clay.com","url":"https://alion.io/company/clay","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":9,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":75,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anthropic","optional":false},{"name":"GDPR","optional":false},{"name":"OpenAI","optional":false},{"name":"SOC 2","optional":false},{"name":"ISO 27001","optional":true},{"name":"Slack","optional":true}],"status":"live","first_seen_at":"2026-10-02T15:36:51Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-15T22:12:14Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"About Clay\nAI is unleashing the biggest wave of company creation in history. Clay's mission is to be the engine those companies use to grow to their full potential.\nClay predicts the next best action for your business and then helps you take it. We started by aggregating the best data for B2B companies. Then, we built the infrastructure to run any personalized campaign on top of it, including emails, ads, landing pages, and workflows that make reps more productive. Now, we're building agents that can help grow your company for you. We're already helping thousands of customers - including Anthropic, OpenAI, Google, and Visa - go to market with unique data, signals, and AI research.\nIn 2026, we raised a $115M Series D at $7.1B Valuation led by Wellington - and are on track to cross $200M in revenue this quarter. We also launched a $1M Scholarship fund for GTME Education.\nSome things to know about us:\nOur community includes 17,000+ customers, 200+ integration partners, 125+ agencies, 50+ Clay clubs, and 30k members on Slack.\n\nOur culture is unique inside and outside of work. Our team members are also DJs, activists, writers, clowns, marathoners, skydivers, psychedelic therapists, social workers, and more.\n\nAll employees can work with world-class coaches who specialize in creativity, management, and more.\n\nOur operating principles - including negative maintenance and non-attached action - guide our work. Read more about them here.\n\nRead about us in the NYT, Forbes, First Round Review, and more.\n\nHear from our employees directly on our Glassdoor page!\nProduct Operations @ Clay\nAs Clay continues to scale, privacy and compliance have become core to how we operate and build trust with our customers. We're looking for a GRC Program Manager to build and own the operational systems that keep us compliant across vendor management, data privacy, and security. You'll be creating scalable processes from scratch to support teams across the company as they onboard vendors and handle customer information. You'll work at the intersection of engineering, security, legal and business teams to build processes that scales with our growth.\nWhat You'll Do:\nVendor Onboarding & Risk Management: Build and own the end-to-end vendor onboarding compliance process. When teams want to onboard a new vendor, conduct proper review (DPA, SOC 2/GDPR data compliance), update our subprocessor list, and manage customer notifications\n\nGRC Vendor Management: Serve as the internal owner and point of contact for external GRC vendors. Manage intake, ticketing, SLAs, quality review, and performance metrics to ensure security and compliance requests are tracked, resolved, and continuously improved\n\nCompliance Reviews: Build processes for and complete compliance reviews when teams evaluate purchasing new data sets and vendor compliance.\n\nCross-Functional Program Building: Create operational processes and systems from scratch to scale compliance work across the company. You'll own programs end-to-end, not just coordinate projects\n\nCustomer Security Support: Assist in responding to security and privacy questionnaires from prospective and existing customers, with a particular focus on privacy, data protection, and compliance-related questions\n\nWhat You'll Bring\nBachelor's degree in Information Security, Business, or a related field (or equivalent experience)\n\n5+ years of experience building and scaling operational programs, ideally in a SaaS or tech environment\n\nStrong builder mindset: you're excited to create processes and systems from scratch, not just maintain existing ones\n\nUnderstanding of privacy laws and frameworks (GDPR, CCPA/CPRA, etc.) with the ability to apply them practically across vendor management, data flows, and employee compliance\n\nExperience with vendor risk assessments, security questionnaires, and DPA/subprocessor management\n\nFamiliarity with DSAR processes and compliance tools like Vanta, Transcend, or similar platforms\n\nExcellent project management skills with the ability to drive complex, cross-functional initiatives to completion\n\nStrong communication skills for partnering with legal, engineering, data teams, and business stakeholders\n\nAbility to work independently, prioritize effectively, and adapt in a fast-paced, high-growth environment\n\nBonus Points\nKnowledge of additional compliance standards (e.g., ISO 27001, SOC 2)\n\nExperience with data mapping, privacy impact assessments (PIAs), or incident response in a privacy context\n\nTechnical aptitude for understanding SaaS infrastructure and data flows","description_format":"text","description_chars":4557,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Sales Enablement","Lead Generation","Marketing & Sales AI","B2B Company & Contact Data"],"lifecycle":[{"event":"open","at":"2026-10-02T23:51:18Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":12,"expected_fill_days":75,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/clay-product-operations-security-compliance","json_url":"https://alion.io/job/clay-product-operations-security-compliance.json","meta":{"generated_at":"2026-10-16T00:22:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":623,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1484},"rest":"https://alion.io/mcp/rest/get_company?id=1484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclay-product-operations-security-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclay-product-operations-security-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclay-product-operations-security-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clay-product-operations-security-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclay-product-operations-security-compliance"}]}